Keep concrete5 composer.lock

Fix #1026